Jayden/AFFiNE-Mirror
0
0
Fork 0
mirror of https://github.com/toeverything/AFFiNE.git synced 2026-07-15 17:16:16 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(youtube): Incomplete URL substring sanitization

Browse Source
This commit is contained in:
tzhangchi
2022-08-17 10:35:12 +08:00
parent a17ec1c5f9
commit fd9ed2862f
2 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libs/components/editor-blocks/src/blocks/youtube/index.ts
+4 -3
View File
@@ -1,9 +1,9 @@
import { Protocol } from '@toeverything/datasource/db-service';
import {
AsyncBlock,
BaseView,
SelectBlock,
} from '@toeverything/framework/virgo';
import { Protocol } from '@toeverything/datasource/db-service';
import { YoutubeView } from './YoutubeView';
export class YoutubeBlock extends BaseView {
@@ -19,9 +19,10 @@ export class YoutubeBlock extends BaseView {
const tag_name = el.tagName;
if (tag_name === 'A' && el.parentElement?.childElementCount === 1) {
const href = el.getAttribute('href');
const allowedHosts = ['.youtube.com'];
const allowedHosts = ['www.youtu.be', 'www.youtube.com'];
const host = new URL(href).host;
if (allowedHosts.includes(href)) {
if (allowedHosts.includes(host)) {
return [
{
type: this.type,
libs/components/editor-blocks/src/components/source-view/format-url/youtube.ts
+3 -2
View File
@@ -1,6 +1,7 @@
export const isYoutubeUrl = (url?: string): boolean => {
const allowedHosts = ['youtu.be', 'youtube.com'];
return allowedHosts.includes(url);
const allowedHosts = ['www.youtu.be', 'www.youtube.com'];
const host = new URL(url).host;
return allowedHosts.includes(host);
};
const _regexp = /.*(?:youtu.be\/|v\/|u\/\w\/|embed\/|watch\?v=)([^#&?]*).*/;